Live data from Hacker News

I2P: End-to-end encrypted and anonymous internet

github.com

81–90 of 124 posts

Re: I2P: End-to-end encrypted and anonymous internet

#81

Earlier quoted context omitted.

One of the maintainers added an inclusion statement onto the footer of the website and a few developers thought it was pushing an LGBT agenda so they quit. This was from a quick search, I’m sure there was more to it than that - one part was that some were mad they weren’t even consulted before it was added and misrepresented their views.

That inclusion statement seems very badly thought out and quite Western-centric. For many people in oppressive states who rely on censorship-resistant and privacy-guaranteeing software, being a dissident isn’t necessarily about defending minorities or trying to make the world a better place. It’s often about retreating into a private world with your fellows and trying to live your life as best you can under the circu…

So would you say they would be better off to have stayed politically neutral?

Re: I2P: End-to-end encrypted and anonymous internet

#82
post #49
post #45

Earlier quoted context omitted.

Wait, but if the copyright holder is sending the actual payload to you as a client, couldn't you make the argument that they implicitly authorized you to have it? AFAIK, cops can't deal you actual drugs and then arrest you for it.

What you're describing is entrapment: https://en.wikipedia.org/wiki/Entrapment Sometimes its legal, depends where you are and how it was done.

The copyright holders are not agents of the state, this is not entrapment.

Re: I2P: End-to-end encrypted and anonymous internet

#83
post #38

Earlier quoted context omitted.

Oh, I need to take a look at this.. I hate Java. I wonder why such a low level thing does NOT have C implementation actually.

Perhaps security was a concern

Sounds like a candidate for rewriting in rust.

Re: I2P: End-to-end encrypted and anonymous internet

#84

Earlier quoted context omitted.

Perhaps security was a concern

Sounds like a candidate for rewriting in rust.

Looks like it's stalled lately, but there was a project doing that: https://github.com/str4d/ire

Re: I2P: End-to-end encrypted and anonymous internet

#85
post #3

I really like I2P as a project, and I think it gets a lot of things right. For example having every network participant relay some internal traffic, instead of relying on altruism from relay operators, makes it much harder for a single entity to control enough hops to deanonymize users. Sadly, outside of torrenting I2P doesn't seem to have much traction, losing out to the better funded tor project

I2P has a community of people that actually use the darktubes, as opposed to Tor. 99% of Tor users use Tor to browse the vanilla internets just. There is no real 'Tor community'

Re: I2P: End-to-end encrypted and anonymous internet

#86
post #21

For those who wondering: best practical use of I2P is to tunnel SSH access to obscure devices behind NAT where you can't or dont want to use something like Tailscale. Or imagine you have that torrent box you using for seeding obscure book or music collection. You can pay for the server with crypto, but I2P is good to make sure you can access and configure it privately.

Have you heard of yggdrasil then? It sounds like it would be a better match for your use candidate

yggdrasil is a "greynet". End-to-end encrypted, self-organizing via DHT, but no onion/garlic routing. Has interop capabilities with both Tor and I2P though, and some yggdrasil nodes are I2P- or Tor-only. A world-tree with roots (tunnels) going in all the spheres of existence (nets)

Hands out IPv6 addresses to its users. These addresses are generated automatically from the signature of your public key, so essentially impossible to spoof, and automatic authentication, plus end-to-end encryption. As if IPsec was pervasive and completely transparent

Re: I2P: End-to-end encrypted and anonymous internet

#87
post #45

Earlier quoted context omitted.

If you want to avoid copyright notices, then you need to do it for the payload too. That's because a copyright holder could easily host a copy of some pirate film on your new network, and then just see the destination of the data packets.

Wait, but if the copyright holder is sending the actual payload to you as a client, couldn't you make the argument that they implicitly authorized you to have it? AFAIK, cops can't deal you actual drugs and then arrest you for it.

Cops can totally do that.

"Entrapment" is actually quite narrow. IANAL, but my understanding is it requires showing that you wouldn't have done the illegal activity without the involvement of the police.

Harassing a person for months to buy weed qualifies; posing as a drug dealer and offering drugs to the people who pass by you, does not.

Re: I2P: End-to-end encrypted and anonymous internet

#88

Earlier quoted context omitted.

One of the reasons people were wary of Freenet, where every user would participate in the hosting, was that if the encryption algorithm was ever broken, people would undoubtedly be revealed to have been passing CSAM along. Unwittingly, but still. Does I2P’s model not spark the same concerns?

Do ISPs worry about relaying TLS traffic because if the encryption is ever broken, it will be revealed that they were relaying CSAM? There isn't any difference to an i2p node relaying encrypted data and and ISP doing it.

It's the same risk as running a Tor exit node: you getting arrested, having all of your electronics confiscated and facing life ruining charges because someone was caught downloading illegal content from IP addresses that point to your servers.

Even if charges get dropped, or you win in court, that's quite a burden.

Re: I2P: End-to-end encrypted and anonymous internet

#89
post #37

Earlier quoted context omitted.

With modern tech, I should be able to launch a web server, give you my ipv6 that never changes, route a few ports through fw and we’re good.

With modern tech I should never have any identifier that doesn’t change whatsoever. Mac,ip,etc should randomize every nth second lol

It's already possible (and quite easy) to assign a static IPv6 for incoming traffic e.g. webserver, then configure a private and constantly rotating IPv6 for all outgoing traffic.

Re: I2P: End-to-end encrypted and anonymous internet

#90
post #3

I really like I2P as a project, and I think it gets a lot of things right. For example having every network participant relay some internal traffic, instead of relying on altruism from relay operators, makes it much harder for a single entity to control enough hops to deanonymize users. Sadly, outside of torrenting I2P doesn't seem to have much traction, losing out to the better funded tor project

I2P has a community of people that actually use the darktubes, as opposed to Tor. 99% of Tor users use Tor to browse the vanilla internets just. There is no real 'Tor community'

> There is no real 'Tor community'

What a bold statement. r/onions has 400k members. Where else would you sell someone's credit card or fentanyl? Ebay?

Post reply on HN